GET /api/v1/crl

Certificate Revocation List. Returns revoked authority keys and suspended agent hashes.

Auth: None (public)

Base URL: https://provenonce.io

Cached for 5 minutes. Use this to check whether an authority key has been revoked or an agent has been suspended before trusting a passport offline.

Request


curl https://provenonce.io/api/v1/crl

Response


{
  "schema_version": 1,
  "generated_at": "2026-02-12T12:00:00.000Z",
  "revoked_authority_keys": [],
  "suspended_agents": [
    "0xabc123..."
  ],
  "next_update_seconds": 300
}

Response fields

Field	Type	Description
`schema_version`	number	Always `1`
`generated_at`	string	ISO 8601 timestamp of generation
`revoked_authority_keys`	string[]	Authority key IDs that have been revoked
`suspended_agents`	string[]	Agent hashes that are currently suspended (frozen or refused)
`next_update_seconds`	number	Seconds until next refresh (300 = 5 minutes)

Caching

The response includes Cache-Control: public, max-age=300. Clients should cache the CRL locally and refresh every 5 minutes.

Error responses

Status	Body	Cause
429	`{"error": "...", "code": "RATE_LIMITED"}`	Rate limit exceeded